CVE-2025-69990

Severity: critical (CVSS 9.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-01-13 · updated 2026-06-17
Weakness: CWE-552

Description

phpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in remove_file.php. The parameter file can cause any file to be deleted.

Affected products

PHPGurukul News Portal: 4.1

References

https://github.com/Y4y17/CVE/blob/main/News%20Portal%20Project/File%20deletion%20vulnerability.md

Get alerted when CVE-2025-69990 or the next vulnerability affects your stack